apps pinned to exact version numbers

clusters/base/apps/mosquitto/chart/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: eclipse-mosquitto
-  tag: "2"
+  tag: "2.1.2"
   pullPolicy: IfNotPresent
 
 # not really needed, as StatefulSet has hardcoded "replicas: 1"

clusters/base/apps/mosquitto/helmrelease.yaml

@@ -18,7 +18,7 @@ spec:
   values:
     image:
       repository: eclipse-mosquitto
-      tag: "2"
+      tag: "2.1.2"
       pullPolicy: IfNotPresent
 
     replicaCount: 1

clusters/base/apps/mosquitto/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: mosquitto-passwd
     namespace: mqtt
 stringData:
-    passwd: ENC[AES256_GCM,data:SMb1yfAFP9PVS8GzdFHrz/ZAXUqx8/SoqEj/JHmqZLaaV3uJ09Q7VBo8Z8/shE4QEof5kZacrQYa9BRLWF67ArmPBUvAp19i2SYlazSW4SXpCnJrq00cqZ0xF4ZxiFIX1Ksr+bb74uMZq04ivxu5Rj6hfpu5y/Efs9TnT/Y6hoN/y2XHf79WgjtdBeaTEbQlhaNGNAbyLmLb4GXB1nikoA0IAOfdoGG8zQuXhFAFrJKtimD37UnamMO1+R4Xwg==,iv:5DtW7+SAD5PbEKKZIog8aV3N2pRqDx/J2sYe4EFx+pI=,tag:vQzbEkUaeBAWRW8Zn3l1sg==,type:str]
+    passwd: ENC[AES256_GCM,data:RHKtt4UgqElKW/rw9BnpZKOnhchsqmO5jVVVRJBy82b+9KrbUN5iGQ3k5X4/6gjrKKOcs5QabJahR+i/aVSr5fVyCJR7Y45YvKk+eyKqGuDTFCkzjxpSDvO4AseQvOHSGTMRXQx73jdpCnEEYtoXZNCLuhGtueKvrhkNDDCLFwtybaWsrI4g3fwo5auHbyWwjoxXskv0+pwi7vnESIJudJl4ul3Ie4NpyispZ+H0O6p9cn+Hwu2qoTJbR/zbpA==,iv:Blp/QsgEVD73JhGFzM3GNFPfUcwB58fzKJlQIGBw5Yg=,tag:InRGXl9vB/DF778pbhoqfw==,type:str]
 sops:
     age:
         - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkSFlQSTFYc2lZNXNwaXk3
-            WGFZNEJ5VnNjUmp1M2JmN0pJUzBoQURKYVFFCk1QRHZ4OVE1V3pTUklXRGYvdjlL
-            TVcwM2tkTERhQjA2MG84YjZEajU0ZFkKLS0tIG8yR1BPTnR0Sk01LzFjaWhManJz
-            MVNjbzM0VmFmeHh2WWpZL1QwKzNyaEUKO7NdED5AXrKRAV3kAdIDl2V3E+wxtVpp
-            IqKU/sjBMtZ0pMnpQNLGmrMVVuz+Fdfpz6URjeMdbgOOKgkjuzxGqQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBudUhrOVlvUU82cG45K3ll
+            R05Dc0NUdFN3b0k2UmZoSWlxd1diQ0dNcjBFCm1icmlvQUhIaFYwSFZ0MURmQVUy
+            bTJPWk5mWVpQb1JNQXhCOFhpNXByNTAKLS0tIE1vR0t3SUdGTnRiWFVXOG5yYVhk
+            UVBsRDlZSVpJbk1KYmJGYlRmelNWWVkKBVabDs2XS6XAVKiKbAtk3CqraoBXOD5I
+            +0uq5YeFvMxhrnX6wXffCS7S3zbvNV6/2Enbt7SBJ8EhCvKbfaOtfg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:29:37Z"
-    mac: ENC[AES256_GCM,data:Qp0duD+vtCJ3M3+9yRuf/tpF/hk93oihs/aT2fygjyH4i9t34W5WIhaSEyy+G9zR2X3o0jyqCrFFfajvKxkwEIOJKrTxWuU2GyPfmKrUmpv9GHEGariyF9NjOjMBsxel4DnelWM90lM64JhjB98xbTrYDTCp8GRfxdMC/9Vr8zE=,iv:Zl139T6B3zb34JQN3B+Bqzti0Lx9+rLd5PoY7Jxkpu4=,tag:0J0A62f0HQlbF3xpv+K8xA==,type:str]
+    lastmodified: "2026-08-26T10:29:47Z"
+    mac: ENC[AES256_GCM,data:/NEEVA/hO2NUIWOhVjL7ZmtD9Ac169CL4D71qPueZbNSHtTqx8GHeo8DI1tpsUBuGytVBQxh1MXK3REt/bD2GzU1dCpvtTtQmQb+B57H6Za3RIyPU51QTt9nHYHiWend3tcxlR3Xc8h5TBa0kKwjXvlij4jEUM+dA5UESE/QGFk=,iv:yTyP3PVw+pVzPPqMN7EyIfM/BN/wK9nIHx84F65A+/k=,tag:oTpIqbAOq5aqlCWnVqaKNw==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0